SUDO Configuration with ldap

[ambika_1]

Hi,
I have build sudo with ldap option. Now i am doing testing. In which ldap.conf i,e server or client we have to make following entry
sudoers_base ou=SUDOers,dc=example,dc=com?
I have tried this with the ldap server's ldap.conf file, sudo is not reading data from the database. Any thing more we have to do?.

I have inserted data into ldap in correct format.

Thanks and Regards,
Ambika

[Mustafa Gulercan]

hi;
Importing /etc/sudoers to LDAP:
step 1:
Ask your LDAP Admin where to create the ou=SUDOers container.
(an example location is shown below).Then use the provided script to convert your sudoers file into LDIF format.The script will also convert any default options.
#SUDOERS_BASE=ou=SUDOers,dc=example,dc=com
#export SUDOERS_BASE
#./sudoers2ldif /etc/sudoers >/tmp/sudoers.ldif

step 2:
Import into your directory server.If you are using OpenLDAP,do the following if you are using another directory,provide the LDIF file to your LDAP Admin.An example is ashown below.
#ldapadd -f /tmp/sudoers.ldif -h ldapserver > -D cn=Manager,dc=example,dc=com -W -x

regards;
mustafa

[ambika_1]

Hi,
I have done all the steps given in http://www.courtesan.com/sudo/readme_ldap.html.
When i did sudo -l , its showing entries which are there in /etc/sudoers. But it should show from ldap database also. So is there ary other way to configure.

Regards,
Ambika

[Mustafa Gulercan]

use following LDAP browser to administer your SUDOers.
GQ-
http://biot.com/

[ambika_1]

Hi,
Is there any way to check wether sudo is built with ldap options or not?

We have to build GQ tool, any special configuration is required to build GQ tool?


Thanks and Regards,
Ambika

[Mustafa Gulercan]

ambika;
pls read followink link;there are lots of tricks at the text.
http://www.courtesan.com/sudo/readme_ldap.html

regards;
mustafa